What does this tool do?
CVSS 3.1 Calculator computes a CVSS v3.1 base score using the official FIRST.org formula — you just click the eight base metrics (Attack Vector, Attack Complexity, Privileges Required, User Interaction, Scope, Confidentiality, Integrity, Availability). It instantly shows the numeric score (0.0-10.0), the colored severity rating (None/Low/Medium/High/Critical) and the vector string (e.g. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H = 9.8 Critical). Each metric has an inline explanation and everything runs in your browser.
How to use it
- Enter your listener IP and port.
- Pick the command or payload that fits your setup.
- Copy it and use it only on systems you are authorized to test.
What it solves
Pentest reports and CVE triage need a consistent, defensible severity score for every finding. This calculator turns each finding into a repeatable score and a standard vector string from the metrics you select, so clients and teams speak the same language. You can paste the vector string straight into a report or a bug bounty submission.
Base, temporal and environmental scores
This tool computes the base score only — the value that comes from the intrinsic nature of the flaw and does not change over time. The temporal score factors in time-varying aspects like exploit maturity and patch availability, while the environmental score weights asset criticality in your own environment. The base score is the value most commonly used for a shared language and comparison.
Frequently asked questions
What are the severity ranges?
In CVSS v3.1 they are 0.0 None, 0.1-3.9 Low, 4.0-6.9 Medium, 7.0-8.9 High and 9.0-10.0 Critical. The tool shows the matching color and label automatically as it computes the score.
What does Scope:Changed mean?
Scope captures whether the impact of a vulnerability crosses the original security authority boundary. Changed means a flaw in the vulnerable component affects a different component — such as a sandbox escape or a jump to the hypervisor — and it typically raises the score.
What is the difference between base and temporal/environmental?
The base score measures the unchanging nature of the flaw and is the value reported most often. Temporal adds time-varying factors like exploit and patch status, and environmental adds the criticality specific to your environment. This tool computes the base score only.
Is CVSS 3.1 Calculator free?
Yes. CVSS 3.1 Calculator and all 300+ tools on MagmaNex are completely free with no signup or account required.
Is my data safe?
Yes. Everything runs locally in your browser. The data you enter is never sent to a server, stored, or shared.
Does it work on mobile?
Yes. CVSS 3.1 Calculator works on phones, tablets and desktops — no app download needed.
🔒 Privacy: everything runs in your browser, your data is never sent to a server.